Answer: Spear phishing; Pharming
Step-by-step explanation:
Based on the information given in the question, the security concerns that need to be identified and mitigated are spear phishing and pharming.
Spear phishing is the fraudulent practice whereby emails are sent from a trusted sender in which people are targeted to give out some confidential information.
Pharming is a cyberattack whereby the traffic of a website is redirected to another fake site. This is typically done when the host file on the computer of the victim has been changed.